summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--.github/dependabot.yml2
-rw-r--r--lib/Controller/PageController.php1
2 files changed, 1 insertions, 2 deletions
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index f863df114..fbf793116 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,7 +7,7 @@ version: 2
updates:
# Maintain dependencies for npm
- package-ecosystem: "npm"
- directory: "/js"
+ directory: "/"
schedule:
interval: "daily"
labels:
diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
index 41d0e7f89..abdd3f2f7 100644
--- a/lib/Controller/PageController.php
+++ b/lib/Controller/PageController.php
@@ -96,7 +96,6 @@ class PageController extends Controller
$csp->addAllowedImageDomain('*')
->addAllowedMediaDomain('*')
->addAllowedConnectDomain('*')// chrome breaks on audio elements
- ->allowEvalScript(true)
->addAllowedFrameDomain('https://youtube.com')
->addAllowedFrameDomain('https://www.youtube.com')
->addAllowedFrameDomain('https://player.vimeo.com')